Nokia Voyager Reference Manual page 360

7
Configuring Traffic Management
To enable firewall monitoring, click
MONITORING
If VPN-1/FireWall-1 is not running at the time you change the cluster state to
, click D
UP
FireWall-1 is not running and you do not disable firewall monitoring, you
cannot initialize the cluster protocol.
Note
Be sure to enable firewall monitoring before you put the cluster into
service (assuming that you are using VPN-1/FireWall-1).
Configuring the Cold Start Interval
If a cluster node running VPN-1/FireWall-1 is rebooted, it is best if VPN-1/
FireWall-1 is able to synchronize with the firewalls running on the other
cluster nodes before the rebooted node rejoins the cluster. This prevents any
issues that could result from the node attempting to handle traffic before
VPN-1/FireWall-1 has synchronized.
The cold start interval is a time (in seconds) that the system waits before
attempting to join the cluster so that VPN-1/FireWall-1 is able to synchronize
first. The system waits for this interval only if you have enabled firewall
monitoring.
This option is available only if you are using VPN-1/FireWall-1 NG FP3.
VPN-1/FireWall-1 NG with Application Intelligence and later does not
require this delay.
Enabling SecuRemote Client Access
If you want SecuRemote clients to be able to access servers behind the cluster,
click Y
This option is available only if you are using VPN-1/FireWall-1 NG FP3.
VPN-1/FireWall-1 NG with Application Intelligence and later does not
require this delay.
362
? in the firewall table.
next to E
ISABLE
in the E S
ES NABLE ECU
next to E
ENABLE
VPN-1/FW-1
NABLE
R C
EMOTE LIENTS
VPN-1/FW-1
NABLE
? If VPN-1/
MONITORING
field.
Voyager Reference Guide